fix(recursor): allow "zonemd: ignore" with DNSSEC in Zone to Cache

diff --git a/pdns/recursordist/rec-zonetocache.cc b/pdns/recursordist/rec-zonetocache.cc
index 137d81b4535acf4fe3fcfa213a52c831044b4525..46784ae86ec4a1e29c2f9c6007f66a8f99b8d057 100644 (file)
--- a/pdns/recursordist/rec-zonetocache.cc
+++ b/pdns/recursordist/rec-zonetocache.cc
@@ -155,7 +155,7 @@ pdns::ZoneMD::Result ZoneData::getByAXFR(const RecZoneToCache::Config& config, p
   // coverity[store_truncates_time_t]
   while (axfr.getChunk(nop, &chunk, (axfrStart + axfrTimeout - axfrNow)) != 0) {
     for (auto& dnsRecord : chunk) {
-      if (config.d_zonemd != pdns::ZoneMD::Config::Ignore) {
+      if (config.d_zonemd != pdns::ZoneMD::Config::Ignore || config.d_dnssec != pdns::ZoneMD::Config::Ignore) {
         zonemd.readRecord(dnsRecord);
       }
       parseDRForCache(dnsRecord);